News
:
This forum is now permanently frozen.
m0n0wall Forum
>
m0n0wall Support (English)
>
VPN
Topic: Slow throughput IPSec site-site VPN
Pages: [
1
]
Topic: Slow throughput IPSec site-site VPN (Read 3327 times)
Slow throughput IPSec site-site VPN
« on: December 19, 2011, 15:28:41 »
bernikm
Posts: 7
Hi
We're dealing with a problem of slow throughput between two dislocated units both running m0n0wall on Intel CPU P4 1.6 Ghz 256 RAM with 50/50 internet connection.
The problem is, that under IPSec the maximum throughput is 1.5 - 3 Mb/s. Bypassing m0n0wall throughput is normal.
Looking for performance charts on both m0n0wall server there is no high CPU or memory during VPN connection, so there must be some kind of SW problem.
Can anyone point me to the right direction how to solve this problem or what to look?
Thank you in advance !
Re: Slow throughput IPSec site-site VPN
« Reply #1 on: December 19, 2011, 22:46:06 »
aqualityplace
Posts: 10
We are having the same issue. I have two monwalls each wth 100Mbit internet connections. USing ipsec vpn tunnel. I have set the encryption to use blowfish.
Issue is we average about 17Mbit with a few peaks up to 20Mbit
Running these on VMware each has 512MB ram and 2GHZ CPU's. I tried giving them 2X CPU's still the same and to be fair when I watch the susage the CPU is only pushing about 500Mhz.
Not looking for the full 100Mbit but I did hope we could get 30-40Mbit
Re: Slow throughput IPSec site-site VPN
« Reply #2 on: December 19, 2011, 23:32:14 »
Fred Grayson
Posts: 994
Maybe some of this applies or helps?
http://forum.m0n0.ch/index.php/topic,5369.0.html#msg16252
--
Google is your friend and Bob's your uncle.
Re: Slow throughput IPSec site-site VPN
« Reply #3 on: December 19, 2011, 23:34:35 »
aqualityplace
Posts: 10
Quote from: fredg on December 19, 2011, 23:32:14
Maybe some of this applies or helps?
http://forum.m0n0.ch/index.php/topic,5369.0.html#msg16252
May apply - I have no hardware acceleration just using software. I would have thougt to see a CPU bottleneck though
Re: Slow throughput IPSec site-site VPN
« Reply #4 on: December 19, 2011, 23:48:55 »
Fred Grayson
Posts: 994
The OP in the referenced post didn't mention his CPU load.
Maybe Manuel will see this and say what his CPU load was prior to installing the crypt-card.
--
Google is your friend and Bob's your uncle.
Pages: [
1
]